Privacy Policy

1. Data Controller

The controller responsible for processing your personal data is:

Alba Romero Cobos

Registered Speech-Language Pathologist

Málaga, Spain

Email: alba@albaromerologopeda.com

You may exercise your data protection rights by contacting us directly at the email address above.

2. Data we collect

We collect the following personal data depending on your interaction with our website:

• Contact form: name, email address, phone number (optional) and the content of your message.
• Browsing data: anonymised IP address, browser type, pages visited, time on site and traffic source, via Google Analytics 4 (only if you have given your consent).
• WhatsApp or phone communications: data you voluntarily provide when initiating contact.

3. Purposes of processing

Your personal data is processed for the following purposes:

• Managing and responding to information requests and appointment enquiries submitted via the contact form.
• Communicating with you through the channels you have used (email, phone, WhatsApp).
• Statistical analysis of user behaviour on the website to improve the browsing experience (only with your prior consent).
• Compliance with applicable legal obligations.

4. Legal basis for processing

The processing of your data is based on the following legal grounds:

• Consent of the data subject (Art. 6.1.a GDPR): for processing data via the contact form and for analytical cookies.
• Legitimate interest of the controller (Art. 6.1.f GDPR): for improving services and the website's security.
• Compliance with legal obligations (Art. 6.1.c GDPR): where required by applicable regulations.

5. Data retention

Your personal data will be retained for the following periods:

• Contact form data: until your enquiry is resolved and, subsequently, for the time necessary to handle possible claims (maximum 2 years).
• Analytical data: in accordance with the periods established by Google Analytics 4 (14 months default user data retention).
• Communications data: while an active relationship exists and during the applicable legal prescription period.

6. Disclosure of data to third parties

We do not share your personal data with third parties except as required by law. However, for the operation of the website we use the following third-party services that may access browsing data:

• Google Analytics 4 (Google LLC): web traffic analysis. Google may transfer data to the US under the EU-US Data Privacy Framework. For more information: policies.google.com/privacy.
• Vercel Inc.: web hosting provider. May access server access data in accordance with its privacy policy.

7. Your rights

Under the GDPR, you have the right to exercise the following rights regarding your personal data. You may do so by sending an email to alba@albaromerologopeda.com, clearly indicating the right you wish to exercise and attaching a copy of your identity document:

• Right of access: to know what data of yours we process.
• Right of rectification: to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): to request the deletion of your data when it is no longer necessary.
• Right to restriction of processing: to request that the use of your data be restricted.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to object: to object to the processing of your data in certain circumstances.
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing.

8. Right to lodge a complaint with the supervisory authority

If you consider that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain:

Agencia Española de Protección de Datos

C/ Jorge Juan, 6 – 28001 Madrid

www.aepd.es

9. Data security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, accidental destruction or alteration, as required by the GDPR. The website uses HTTPS encryption in all communications.

10. Changes to this privacy policy

We reserve the right to update this privacy policy to reflect legislative changes or changes in our activity. We recommend that you consult it periodically. The date of the last update is indicated in the header of this document.